2026

In the Linux kernel, the following vulnerability has been resolved: mm/pagewalk: fix stale walk->action escaping walk_p

In the Linux kernel, the following vulnerability has been resolved: tracing/user_events: Clear copied tracing state bef

In the Linux kernel, the following vulnerability has been resolved: tracing: Fix retry exhaustion in simple ring buffer

In the Linux kernel, the following vulnerability has been resolved: tracing: Fix use-after-free in trace_pipe read on s

In the Linux kernel, the following vulnerability has been resolved: tracing: Fix use-after-free with same-name named tr

In the Linux kernel, the following vulnerability has been resolved: device property: fix infinite loop in fwnode_for_ea

In the Linux kernel, the following vulnerability has been resolved: misc: nsm: bound the device-reported response lengt

In the Linux kernel, the following vulnerability has been resolved: rapidio: mport_cdev: fix use-after-free in dma_req_

In the Linux kernel, the following vulnerability has been resolved: Revert "media: v4l2-dev: fix error handling in __vi

In the Linux kernel, the following vulnerability has been resolved: usb: gadget: at91_udc: drain polled-VBUS timer/work

In the Linux kernel, the following vulnerability has been resolved: usb: gadget: u_audio: Fix use-after-free on sound c

In the Linux kernel, the following vulnerability has been resolved: usb: gadget: uvc: fix dangling pointers in uvc_func

In the Linux kernel, the following vulnerability has been resolved: cxl/ras: Fix cxl_rch_get_aer_info() out-of-bounds A

In the Linux kernel, the following vulnerability has been resolved: HID: sensor-hub: Fix out-of-bounds write in sensor_

In the Linux kernel, the following vulnerability has been resolved: media: cec: stm32: prevent out-of-bounds write on R

In the Linux kernel, the following vulnerability has been resolved: media: vicodec: fix out-of-bounds write in FWHT enc

In the Linux kernel, the following vulnerability has been resolved: nilfs2: fix slab-out-of-bounds in nilfs_direct_prop

In the Linux kernel, the following vulnerability has been resolved: ubifs: fix out-of-bounds read in signature length c

In the Linux kernel, the following vulnerability has been resolved: NFSD: remove flawed WARN_ON_ONCE from nfsd_mode_che

In the Linux kernel, the following vulnerability has been resolved: lockd, nfsd: RCU-protect nlmsvc_ops dispatch nlmsv

In the Linux kernel, the following vulnerability has been resolved: nfsd: release path refs on follow_down() error nfs

In the Linux kernel, the following vulnerability has been resolved: nfsd: Reset write verifier when async COPY writebac

In the Linux kernel, the following vulnerability has been resolved: nfsd: restore rq_status_counter to even on all nfsd

In the Linux kernel, the following vulnerability has been resolved: nfsd: sample writeback error cursor before async CO

In the Linux kernel, the following vulnerability has been resolved: nfsd: validate symlink target length in NFSv4 CREAT

In the Linux kernel, the following vulnerability has been resolved: nfsd: block non-SAVEFH ops after FOREIGN PUTFH to p

In the Linux kernel, the following vulnerability has been resolved: nfsd: cap decoded POSIX ACL count to bound sort cos

In the Linux kernel, the following vulnerability has been resolved: nfsd: clear CALLBACK_RUNNING on failed delegation r

In the Linux kernel, the following vulnerability has been resolved: nfsd: clear opcnt on compound arg release to preven

In the Linux kernel, the following vulnerability has been resolved: nfsd: defer vfree of compound ops to fix rpc_status

In the Linux kernel, the following vulnerability has been resolved: nfsd: ensure nfsd_file_do_acquire() does not use a

In the Linux kernel, the following vulnerability has been resolved: nfsd: fix clock domain mismatch in clients_still_re

In the Linux kernel, the following vulnerability has been resolved: nfsd: fix cpntf publish race in nfs4_init_cp_state

In the Linux kernel, the following vulnerability has been resolved: nfsd: fix fcache_disposal UAF by inlining dispose s

In the Linux kernel, the following vulnerability has been resolved: nfsd: fix nfsd_file leak on inter-server COPY setup

In the Linux kernel, the following vulnerability has been resolved: nfsd: fix null dereference in nfsd4_setattr for del

In the Linux kernel, the following vulnerability has been resolved: nfsd: fix partial-write detection in nfsd_direct_wr

In the Linux kernel, the following vulnerability has been resolved: nfsd: hold rcu across localio cmpxchg retry nfsd_f

In the Linux kernel, the following vulnerability has been resolved: nfsd: move nfsd_debugfs_init() after nfsd4_init_sla

In the Linux kernel, the following vulnerability has been resolved: nfsd: close shrinker/GC/fsnotify vs per-net shutdow

In the Linux kernel, the following vulnerability has been resolved: nfsd: reject out-of-range useconds in NFSv2 SETATTR

In the Linux kernel, the following vulnerability has been resolved: nfsd: release OPEN-decoded posix ACLs via op_releas

In the Linux kernel, the following vulnerability has been resolved: nfsd: revoke copy-notify stateids before dropping t

In the Linux kernel, the following vulnerability has been resolved: libceph: validate OSD extent maps before cursor adv

In the Linux kernel, the following vulnerability has been resolved: ceph: cap delegated inode count in ceph_parse_deleg

In the Linux kernel, the following vulnerability has been resolved: ceph: do not repeat ceph_trim_dentries() if no prog

In the Linux kernel, the following vulnerability has been resolved: ceph: fix leaked inode reference on writeback abort

In the Linux kernel, the following vulnerability has been resolved: cifs: clear tcon after cifsFileInfo_put() in cifs_f

In the Linux kernel, the following vulnerability has been resolved: cifs: fix loff_t underflow in cifs_remap_file_range

In the Linux kernel, the following vulnerability has been resolved: cifs: use cifs_invalidate_cache() in cifs_do_trunca